CARVER Vulnerability Assessment

The Nation’s Critical Infrastructures face a myriad of physical and technical threats. These threats, whether natural, man-made, accidental or intentional, each carry a certain level of risk that could compromise national security, public safety, and the economy. The first step in securing Critical Infrastructures is the performance of a full spectrum Risk and Vulnerability Assessment (RVA). An RVA is an assessment of an organization’s critical assets and the consequence of their degradation, their vulnerability to exploitation, and the nature and likelihood of specific threats. The successful execution of an RVA requires highly skilled, knowledgeable, and trained personnel.

During the CARVER Methodology - Target Analysis and Vulnerability Assessment workshop, you will learn how to plan and conduct a vulnerability assessment using CARVER. The workshop reviews the basic elements of planning, executing, and reporting an RVA and countermeasure development. The Department of Defense uses CARVER as an offensive target analysis tool and it has become a very effective defensive tool for Critical Infrastructure Protection. The CARVER workshop includes a series of classroom lectures, practical exercises, and conducting an actual vulnerability assessment of a government or private sector facility. This workshop, taught by a Risk and Vulnerability Assessment expert provides you with a proven methodology, the knowledge, and the training to conduct an assessment and secure your assets.

What you will learn

• How to plan, execute, and report a vulnerability assessment using CARVER
• Application of the SHOCK methodology as an expansion of CARVER
• How to analyze the results of an assessment
• How to determine effective countermeasures
• How to report findings
• Traps to avoid
• Most common errors and how to avoid them

Who should attend

• Federal, state and local security and operations managers
• U.S. civil agencies, government building/facilities managers, and companies with critical infrastructure to be protected
• Guard services, law enforcement, corrections, or other types of security providers and consultants
• Any professional responsible for conducting and documenting security evaluations and audits